force to forward http to proxy

[peterhkim]

I'm not sure if this makes any sense. I'll ask anyway. I'm trying to forward all of my internal http traffic to proxy. I'm using ASA 5510. Is there anyway I can setup ASA forward all http traffic to proxy server that is sitting on DMZ network? I'm trying to avoid changing configuration on clients side PCs.

thanks.

[andrew.burns]

Hi,

Normally you can use WCCP for this purpose but the ASA only supports this if both the clients and proxy are on the same interface (which won't work in your case.) Better to configure WCCP on a router if you can.

For transparent proxy you normally use WCCP or a layer 4 switch (like the Cisco CSS).

Non-transparent proxy using proxy pac files can offer more flexibility, but the initial setup takes some time.

HTH

Andrew.

[peterhkim]

Andrew,

Can you give me any link for setting up proxy pac files?

Thanks.

Peter